diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
deleted file mode 100644
index 48ec24a..0000000
--- a/.github/FUNDING.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-ko_fi: certs
-custom:
- - http://paypal.me/teegris
- - https://buymeacoffee.com/teegris
diff --git a/HiSiBootloaders b/HiSiBootloaders
index 66c21c0..4755428 160000
--- a/HiSiBootloaders
+++ b/HiSiBootloaders
@@ -1 +1 @@
-Subproject commit 66c21c016a6acb2fa74caec32563dec2be8616d9
+Subproject commit 4755428d3dfc2e990ee26139db967db77e799afd
diff --git a/README.md b/README.md
index b56e5fb..b4909ee 100644
--- a/README.md
+++ b/README.md
@@ -10,16 +10,115 @@
## Download
-### π [Click here to download the latest version](https://github.com/mashed-potatoes/PotatoNV/releases/download/v2.2.1/PotatoNV-next-v2.2.1-x86.exe).
+### π [Click here to download the latest version](https://github.com/mashed-potatoes/PotatoNV/releases/download/v2.2.1_2022.03/PotatoNV-next-v2.2.1_2022.03-x86.zip).
Get binaries for Windows in [the releases section](https://github.com/mashed-potatoes/PotatoNV/releases).
For Linux or macOS consider using the [PotatoNV-crossplatform](https://github.com/mashed-potatoes/PotatoNV-crossplatform).
-## Getting started
+## User manual
-Just follow this video guide: https://www.youtube.com/watch?v=YkGugQ019ZY.
+Follow the [video guide](https://www.youtube.com/watch?v=YkGugQ019ZY) or read the manual below.
-## How it works (in a nutshell)
+### Make sure your device is compatible
+
+0. Are you sure you're actually using a Huawei/Honor device?
+1. Open the Settings β About phone. Check the CPU: it should be _**HiSilicon Kirin** \*\*\*_. If it is not your case (MediaTek, Qualcomm), then alas, your device is not supported. :(
+2. Okay, now you know CPU model. It should be one of these modification:
+ - Kirin 620
+ - Kirin 650
+ - Kirin 658
+ - Kirin 659
+ - Kirin 925
+ - Kirin 935
+ - Kirin 950
+ - Kirin 960
+3. Don't worry if CPU is not listed above β ask for a special bootloader for your device in the support chat **if it's older than 4 years** (date of manufacture is 2018 or earlier).
+4. **100% incompatible CPUs: Kirin 710, 710A, 710F, 810, 980, 985, 990 & newer.**
+
+### Getting inside
+
+The first step is the most difficult thing to do. You need to disassemble your device: this is necessary in order to access the contacts on the motherboard.
+
+If you're not sure that you have enough experience to disassemble the device, then consider using paid software, that supports _"software testpoint"_.
+
+> β οΈ **I strongly recommend watching video manuals for disassembling your device.**
+
+> β οΈ **Be extremely careful with planar cables!**
+> These cables are used in tablets, as well as in phones with a fingerprint scanner on the back cover.
+
+You will need: a hair dryer, a guitar pick or a plastic card, conductive tweezers and maybe a screwdriver.
+
+1. Turn off the device.
+2. Heat the back cover evenly with a hair dryer.
+3. After a couple of minutes, try to stick the plastic card into the corner between case and lid, try to lift the edge and then deepen the card.
+4. Move around the perimeter of the back cover, peeling off glue.
+5. Now you can remove the back cover.
+
+### Entering download mode
+
+It's time to Google. You need to find the location of a special point on the motherboard β testpoint.
+
+> π‘ If you are wondering why you need to do something with the unfortunate testpoint, then read [the contents of the spoiler below](#how-it-works).
+
+To search, use the model name before the hyphen + "testpoint".
+For example for Honor 9 Lite (LLD-L31) you should Google ["lld testpoint"](https://www.google.com/search?q=lld+testpoint&tbm=isch).
+
+
+An example how a typical testpoint photo looks like.
+
+
+
+
+The marks may vary:
+
+1. Only one point is marked in the photo.
+2. In the photo, a line is drawn between the point and the metal shield.
+3. In the photo, a line is drawn between two points.
+
+Here you will need sleight of hand: try to short-circuit the point and the metal shield (in option 1 and 2), or short-circuit both points (option 3) with tweezers.
+Without removing the tweezers, connect the USB cable to the computer.
+
+After 3 seconds, the tweezers can be removed.
+
+Open the "Device Manager" β you should see an unknown device named `USB SER`, or Serial Port `HUAWEI USB COM 1.0`.
+
+If the device has not been detected, make sure you are using a good cable, the tweezers are not a dielectric, and you are shorting the desired point.
+
+### Unlocking the bootloader
+
+- Install [HiSuite](https://consumer.huawei.com/en/support/hisuite/).
+- Install [Huawei Testpoint Drivers](https://files.dc-unlocker.com/share.html?v=share/18B15B9D02C945A79B1967234CECB423).
+- Download [the latest release](https://github.com/mashed-potatoes/PotatoNV/releases) of PotatoNV.
+- Start PotatoNV.
+
+> π‘ All bootloaders are flashing to RAM, so an incorrect bootloader cannot harm the device.
+
+> π‘ `Disable FBLOCK` checkbox disables a special securtiy check.
+> That modification allows you to flash/erase secure partitions or execute oem commands,
+> that are not available with normal unlocking by unlock code \[`USERLOCK`].
+
+> β οΈ `FBLOCK` unlocking works correctly only on devices with Kirin 960 or Kirin 65x.
+> Disabling this option can cause serious problems on legacy devices.
+
+Okay, now refer to [this table](#tested-devices) and select the appropriate bootloader.
+
+Press the Start button. πͺ
+
+The procedure will take no more than a minute.
+The program should write a new unlock code, keep it in a safe place.
+
+Reboot your device to fastboot mode and execute following command on the host machine:
+
+```shell
+fastboot oem unlock YOUR_CODE_HERE
+```
+
+have fun.
+
+
+## How it works
+
+
Even before creating PotatoNV, [@TishSerg](https://github.com/TishSerg) discovered that unlock key can be rewritten with the **SHA256 hash** of the desired key to the `USRKEY` property. However, to access **_NVME_** _(a raw partition that stores stuff like serial number, device traits, etc.)_, a user should flash _custom_ recovery or gain temporary root privileges. But both methods are complex and are not guaranteed to work. After researching the legacy bootloader of some Huawei devices, I've found a `nve` command, which allows to read or write any property in the **_NVME_** partition. Of course, this command requires an unlocked bootloader.
So it remains to find a way to quickly unlock the bootloader. The way out is quite simple - use the bootloader from the board software.
@@ -30,12 +129,13 @@ After uploading the bootloader, the device should switch to the fastboot mode. T
So, we're just going to send a command through the USB bulk interface to write SHA256 hash to USRKEY and reboot the device.
That's it.
+
## Tested devices
Device | Model | Bootloader
------ | ----- | ----------
-Huawei P8 Lite (2015) **(!)** | `ALE` | Kirin 620
+Huawei P8 Lite (2015) | `ALE` | Kirin 620
Huawei Y6II | `CAM` | Kirin 620
Honor 5C / 7 Lite | `NEM` | Kirin 65x (A)
Honor 7X | `BND` | Kirin 65x (A)
@@ -50,6 +150,8 @@ Huawei Y9 (2018) | `FLA` | Kirin 65x (A)
Huawei MediaPad M5 Lite | `BAH2` | Kirin 65x (B)
Huawei Nova 2i / Mate 10 Lite | `RNE` | Kirin 65x (B)
Huawei P Smart 2018 | `FIG` | Kirin 65x (B)
+Honor 6 Plus | `PE` | Kirin 925
+Huawei P8 | `GRA` | Kirin 935
Honor 8 Pro / V9 | `DUK` | Kirin 950
Honor 8 | `FRD` | Kirin 950
Huawei P9 Standart | `EVA` | Kirin 950
@@ -62,13 +164,15 @@ Huawei P10 | `VTR` | Kirin 960
## Donate
-**It would be much appreciated if you want to make a small donation to support my work!**
+~~It would be much appreciated if you want to make a small donation to support my work!~~
-PayPal: http://paypal.me/teegris.
+All my accounts are blocked due to the political situation. So nvm! :)
-Buy Me a Coffee: https://www.buymeacoffee.com/teegris.
+Thank you, Martin, MoisΓ©s, Tibor, Emanuele & all those I've forgotten (sorry!).
-Ko-Fi: https://ko-fi.com/certs.
+### Sponsored by JetBrains
+
+
## License